Python Web Hacking Essentials by Earnest Wish - 2015.pdf

(2937 KB) Pobierz
Python Web Hacking
Essentials
Earnest Wish, Leo
Copyright © 2015 Earnest Wish, Leo
All rights reserved.
ISBN: 1511797568
ISBN-13: 978-1511797566
ABOUT THE AUTHORS
Earnest Wish
Earnest Wish has 15 years of experience as an information security
professional and a white hacker. He developed the internet stock
trading system at Samsung SDS at the beginning of his IT career,
and he gained an extensive amount experience in hacking and
security while operating the Internet portal system at KTH (Korea
Telecom Hitel). He is currently responsible for privacy and
information security work in public institutions and has deep
knowledge with respect to vulnerability assessments, programming
and penetration testing. He obtained the Comptia Network +
Certification and the license of Professional Engineer for Computer
System Applications. This license is provided by the Republic of
Korea to leading IT Professionals.
Leo
Leo is a computer architect and a parallel processing expert. He is
the author of six programming books. As a junior programmer, he
developed a billing system and a hacking tool prevention system in
China. In recent years, he has studied security vulnerability analysis
and the improvement in measures for parallel programming. Now,
he is a lead optimization engineer to improve CPU and GPU
performance.
CONTENTS IN DETAIL
Chapter 1 Preparation for Hacking
1.1 Starting Python
1.2. Basic Grammar
1.3 Functions
1.4 Class and Object
1.5 Exception Handling
1.6 Module
1.7 File Handling
1.8 String Format
1
1
3
8
11
14
17
21
25
Chapter 2 Web Hacking
2.1 Overview of Web Hacking
2.2 Configure Test Environment
2.3 SQL Injection
2.4 Password Cracking Attack
2.5 Web Shell Attack
35
35
39
56
67
77
Chapter 3 Conclusion
96
PREFACE
Target Audience
This book is not for professional hackers. Instead, this book is
made for beginners who have programming experience and are
interested in hacking. Here, hacking techniques that can be
easily understood have been described. If you only have a
home PC, you can test all the examples provided here.
I have
included many figures that are intuitively understandable rather than
a litany of explanations. Therefore, it is possible to gain some
practical experience while hacking, since I have only used examples
that can actually be implemented. This book is therefore necessary
for ordinary people who have a curiosity of hackers and are
interested in computers.
Organization of the Book
This book is made up of five major parts, from basic knowledge to
actual hacking code. A beginner is naturally expected to become a
hacker while reading this book.
• Hacking Preparation
Briefly introduce the basic Python syntax that is necessary for
hacking.
• Web Hacking
The Virtual Box test environment configuration is used for a Web
Shell attack to introduce web hacking, which is currently an
important issue. The techniques include SQL Injection, Password
Cracking, and a Web Shell Attack.
Zgłoś jeśli naruszono regulamin